|Email Plug-in (Reporting):||1.1.0-114|
|Email Plug-in (Encryption):||1.2.1-118|
One of SMTP domain is trying to send an email to our users but I found this "Delivery Status: ABORTED"
Message 20309186 aborted: Receiving aborted by sender.
Message 20309186 Delivery Status: ABORTED
However, this sender domain IP address is already in the whitelist sender group. I checked my grey-list mail flow policy too, but, did not find much.
Receiving aborted by sender could be down to multiple things.
Can i get the extract of the mail_logs/tracking (you can remove the sensitive information for privacy purposes).
Essentially if we see aborted after 5 minutes, then it could be the case of a TCP timeout (silent TCP drops occurring or slow TCP transfer).
If we see aborted abruptly, it's likely due to something on the traffic being stopped and connection forcefully cut.
In most cases if this sender is NOT using TLS, you can run a packet capture and verify at which point it fails.
If they are using TLS - the logs may yield some SSL errors.
Lastly, you could also try an injection debug log (GUI > Log Subscriptions -> Add a New Log -> Injection Debug -> Insert their sending IP) and have the issue get recreated and the injection debug would give you some valuable info here.
Going off this error - it looks like it was happening after TLS negotiation and transaction of the mail data.
However I suspect if we ran a packet capture when the issue was happening to verify the negotiation, something might have happened during the TLS transaction that caused the sender to abruptly close the connection.
Thank you so much.
You have given me a clue about the issue. I'll do further investigation and keep you posted here.